Malware · 5h ago

Huntress Traces a Google Doc Malware Split

Huntress documented a targeted X direct-message campaign that used a real Google Doc to steer Mac and Windows users onto different malware paths. The lure came from an account posing as a crypto marketing executive and reached multiple researchers around the end of DEF CON.

Timeline

• Sep 15 Reported by Huntress Blog

Sources

1 source covering this story

• Huntress Blog Sep 15

  Google Doc Sidebar Sends Mac and Windows Users Down Different Paths to Malware | Huntress

  A single X DM split into two malware chains: AMOS stealer on Mac, NetSupport Manager on Windows, see the Huntress SOC analyst breakdown.

Part of the PlainSec briefing for 2026-09-14

Editions

• Briefing for 2026-09-14